CVEs published February 25, 2021
74 CVEs were published on February 25, 2021: 4 critical, 36 high. 1 is now in CISA KEV.
- Published
- 74
- Critical
- 4
- High
- 36
- Medium
- 25
- Low
- 0
- Unrated
- 9
- Now in CISA KEV
- 1
- Fix available
- 8
Most affected products
- Microsoft Windows
- 27
- Microsoft Office Web Apps Server 2013 Service Pack · Mic… +3
- 3
- Microsoft SharePoint Enterprise Server · Microsoft Share… +2
- 3
- Adobe Bridge
- 2
- Microsoft Exchange Server 2019 Cumulative Update · Microsof…
- 2
- Adobe Magento Commerce
- 1
- comrak
- 1
- keylime
- 1
- Microsoft .NET Core · Microsoft .NET +3
- 1
- Microsoft .NET Framework 4.6/4.6.1/4.6.2/4.7/4.7.1/4.7.2 ·…
- 1
Critical 4
- CVE-2021-24094Windows TCP/IP Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2021-24077Windows Fax Service Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2021-24078Windows DNS Server Remote Code Execution VulnerabilityMicrosoft Windows Server · Microsoft Windows Server,
- CVE-2021-24074Windows TCP/IP Remote Code Execution VulnerabilityMicrosoft Windows
High 36
- CVE-2021-26700Visual Studio Code npm-script Extension Remote Code Execution VulnerabilityMicrosoft Visual Studio Code - npm-script Extension · vscod…
- CVE-2021-26701.NET Core Remote Code Execution VulnerabilityMicrosoft .NET Core · Microsoft .NET +3
- CVE-2021-25195Windows PKU2U Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2021-24111.NET Framework Denial of Service VulnerabilityMicrosoft .NET Framework 4.6/4.6.1/4.6.2/4.7/4.7.1/4.7.2 ·…
- CVE-2021-24112.NET Core Remote Code Execution VulnerabilityMicrosoft Visual Studio 2019 for Mac · Microsoft Mono +5
- CVE-2021-24105Package Managers Configurations Remote Code Execution VulnerabilityMicrosoft Package Manager Configurations
- CVE-2021-24103Windows Event Tracing Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2021-24102Windows Event Tracing Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2021-24096Windows Kernel Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2021-24093Windows Graphics Component Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2021-24092Microsoft Defender Elevation of Privilege VulnerabilityMicrosoft Endpoint Protection · Microsoft System Center… +4
- CVE-2021-24088Windows Local Spooler Remote Code Execution VulnerabilityMicrosoft Windows Server · Microsoft Windows
- CVE-2021-24091Windows Camera Codec Pack Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2021-24086Windows TCP/IP Denial of Service VulnerabilityMicrosoft Windows
- CVE-2021-24087Azure IoT CLI extension Elevation of Privilege VulnerabilityMicrosoft azure-iot-cli-extension
- CVE-2021-24083Windows Address Book Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2021-24081Microsoft Windows Codecs Library Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2021-24072Microsoft SharePoint Server Remote Code Execution VulnerabilityMicrosoft SharePoint Enterprise Server · Microsoft Share… +1
- CVE-2021-24069Microsoft Excel Remote Code Execution VulnerabilityMicrosoft Office Web Apps Server 2013 Service Pack · Mic… +3
- CVE-2021-24070Microsoft Excel Remote Code Execution VulnerabilityMicrosoft Office Web Apps Server 2013 Service Pack · Mic… +3
- CVE-2021-24068Microsoft Excel Remote Code Execution VulnerabilityMicrosoft Office Web Apps Server 2013 Service Pack · Mic… +1
- CVE-2021-24066Microsoft SharePoint Remote Code Execution VulnerabilityMicrosoft SharePoint Enterprise Server · Microsoft Share… +2
- CVE-2021-24067Microsoft Excel Remote Code Execution VulnerabilityMicrosoft Office Web Apps Server 2013 Service Pack · Mic… +3
- CVE-2021-1733Sysinternals PsExec Elevation of Privilege VulnerabilityMicrosoft PsExec
- CVE-2021-1734Windows Remote Procedure Call Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2021-1732Windows Win32k Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2021-1728System Center Operations Manager Elevation of Privilege VulnerabilityMicrosoft System Center 2019 Operations Manager
- CVE-2021-1726Microsoft SharePoint Server Spoofing VulnerabilityMicrosoft SharePoint Enterprise Server · Microsoft Share… +2
- CVE-2021-1727Windows Installer Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2021-1722Windows Fax Service Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2021-1698Windows Win32k Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2020-17162Microsoft Windows Security Feature Bypass VulnerabilityMicrosoft Windows
- CVE-2021-1639Visual Studio Code Remote Code Execution VulnerabilityMicrosoft Visual Studio
- CVE-2021-21066Adobe Bridge Font Parsing Out-Of-Bounds Write Arbitrary Code Execution VulnerabilityAdobe Bridge
- CVE-2021-21065Adobe Bridge Font Parsing Out-Of-Bounds Write Arbitrary Code Execution VulnerabilityAdobe Bridge
- CVE-2020-36254scp.c in Dropbear before 2020.79 mishandles the filename of .
Medium, low and unrated 34
- CVE-2021-24113Microsoft Edge (Chromium-based) Security Feature Bypass VulnerabilityMicrosoft Edge
- CVE-2021-24114Microsoft Teams iOS Information Disclosure VulnerabilityMicrosoft Teams for iOS
- CVE-2021-24109Microsoft Azure Kubernetes Service Elevation of Privilege VulnerabilityMicrosoft Azure Kubernetes Service
- CVE-2021-24106Windows DirectX Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2021-24101Microsoft Dataverse Information Disclosure VulnerabilityMicrosoft Dynamics 365 (on-premises)
- CVE-2021-24100Microsoft Edge for Android Information Disclosure VulnerabilityMicrosoft Edge for Android
- CVE-2021-24098Windows Console Driver Denial of Service VulnerabilityMicrosoft Windows
- CVE-2021-24099Skype for Business and Lync Denial of Service VulnerabilityMicrosoft Skype for Business Server 2019 CU2 · Microsof… +1
- CVE-2021-24085Microsoft Exchange Server Spoofing VulnerabilityMicrosoft Exchange Server 2019 Cumulative Update · Microsof…
- CVE-2021-24084Windows Mobile Device Management Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2021-24082Microsoft.PowerShell.Utility Module WDAC Security Feature Bypass VulnerabilityMicrosoft Windows
- CVE-2021-24080Windows Trust Verification API Denial of Service VulnerabilityMicrosoft Windows
- CVE-2021-24079Windows Backup Engine Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2021-24076Microsoft Windows VMSwitch Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2021-24075Microsoft Windows VMSwitch Denial of Service VulnerabilityMicrosoft Windows
- CVE-2021-24073Skype for Business and Lync Spoofing VulnerabilityMicrosoft Skype for Business Server 2015 CU · Microsoft Lyn…
- CVE-2021-24071Microsoft SharePoint Information Disclosure VulnerabilityMicrosoft SharePoint Enterprise Server · Microsoft Share… +2
- CVE-2021-1730Microsoft Exchange Server Spoofing VulnerabilityMicrosoft Exchange Server 2019 Cumulative Update · Microsof…
- CVE-2021-1731PFX Encryption Security Feature Bypass VulnerabilityMicrosoft Windows
- CVE-2021-1724Microsoft Dynamics Business Central Cross-site Scripting VulnerabilityMicrosoft Dynamics NAV · Microsoft Dynamics 365 Business… +1
- CVE-2021-1721.NET Core and Visual Studio Denial of Service VulnerabilityMicrosoft Visual Studio · Microsoft PowerShell Core +47
- CVE-2021-3406A flaw was found in keylime 5.8.1 and older.keylime
- CVE-2021-20203An integer overflow issue was found in the vmxnet3 NIC emulator of the QEMU for versions up to v5.2.0.qemu
- CVE-2021-20328MongoDB Java driver client-side field level encryption not verifying KMS host nameMongoDB mongo-java-driver · mongodb-driver +6
- CVE-2021-20327MongoDB Node.js client side field level encryption library may not be validating KMS certificateMongoDB Node.js Driver mongodb-client-encryption module · m…
- CVE-2020-27543The restify-paginate package 0.0.5 for Node.js allows remote attackers to cause a Denial-of-Service by omitting the HTTP Host header.restify-paginate
- CVE-2020-23534A server-side request forgery (SSRF) vulnerability in Upgrade.php of gopeak masterlab 2.1.5, via the 'source' parameter.
- CVE-2021-27330Triconsole Datepicker Calendar <3.77 is affected by cross-site scripting (XSS) in calendar_form.php.
- CVE-2021-3124Stored cross-site scripting (XSS) in form field in robust.systems product Custom Global Variables v 1.0.5 allows a remote attacker to inject
- CVE-2021-3273Nagios XI below 5.7 is affected by code injection in the /nagiosxi/admin/graphtemplates.php component.
- CVE-2021-21064Magento UPWARD-php Path traversal vulnerability via UPWARD ConnectorAdobe Magento Commerce
- CVE-2020-8032Local privilege escalation to root due to insecure tmp file usageopenSUSE Factory
- CVE-2021-27671An issue was discovered in the comrak crate before 0.9.1 for Rust.comrak
- CVE-2021-27670Appspace 6.2.4 allows SSRF via the api/v1/core/proxy/jsonprequest url parameter.